This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: JMJiwXhZPiDGXDRHHJZJVO5Fnhhkt6s5AMSaVE3CnR0= Subject key identifier: B4:BB:DC:27:F4:35:77:FF:8F:D1:CB:91:BD:02:C0:A7:0D:A3:2D:02 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019BF42C3486A5108520FAA7DD4624659405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 14E7 Signing time: Sun 25 Jan 2026 08:01:36 +0000 Manifest this update: Sun 25 Jan 2026 08:01:36 +0000 Manifest next update: Mon 26 Jan 2026 08:01:36 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: VggH67qb2Tzme1jEUec5V+MhXTQM2+YRHkaHVe/ACNw=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: PltyVjQAqljKh-lpYhHsZNR11q4.roa (hash: M3aePkMYEmgu13dRPatY8KDTkwjaxhLnORYN2cJl+Pk=) 9: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 10: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 11: hkTeBzR1zcpqpx-K2o2CKT69syE.roa (hash: 2ch6dbKSCdDQEw4rDKS8nHOAKxa/9jjwxReZLqw+2wk=) 12: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 13: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 14: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 15: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) 16: xYO3tyyPxHta_UjYp7pYCPsRfo8.roa (hash: sws8cWbHWQhZdTJrDoM6VzTyVp0PMivb8c57UClyZ64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:34:86:a5:10:85:20:fa:a7:dd:46:24:65:94:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 25 08:01:36 2026 GMT Not After : Jan 26 08:01:36 2026 GMT Subject: CN=b4bbdc27f43577ff8fd1cb91bd02c0a70da32d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:36:14:e8:88:0f:da:3d:d0:30:f9:7b:f8: a7:d9:6c:4a:fc:19:05:f1:b3:d4:b3:5a:55:ed:72: 91:7d:21:be:f4:22:6d:e5:7c:de:38:9a:ea:39:d4: 03:a2:b6:db:36:f0:a1:0d:92:7d:4b:06:b4:a4:75: bb:15:e0:4d:8f:e2:50:4e:88:35:9b:c0:e8:8d:9b: aa:4f:a8:3f:56:be:69:df:4c:db:91:e9:5a:fd:f1: 35:c8:ef:8e:17:6b:6b:7c:b5:67:f2:1d:3d:be:8e: 88:55:7b:12:63:e3:5e:ba:67:83:e3:a4:05:0e:7c: 26:4e:ab:39:1f:dc:e2:34:90:74:1b:e6:1c:69:49: c1:3f:9d:6a:97:ab:7d:be:a5:08:dc:1b:ac:1c:06: 38:b5:da:ab:9e:9d:d0:db:12:c9:e7:48:c5:4f:b5: 89:90:ec:b3:78:4d:7f:6a:ed:47:ef:15:3d:26:a7: 55:ab:65:99:42:41:67:41:3b:0e:ea:0b:5d:c2:59: 54:f2:59:23:83:70:3d:66:4a:1e:9d:c5:bb:fa:30: a2:a1:dc:d5:06:f4:c5:19:62:79:70:2c:6e:60:10: 91:4d:75:75:08:1a:ed:fc:30:e2:76:1b:4a:88:41: 2c:9a:1f:4b:11:f1:3f:41:28:19:fd:58:0e:11:7e: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:DC:27:F4:35:77:FF:8F:D1:CB:91:BD:02:C0:A7:0D:A3:2D:02 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:0c:30:dd:a8:cc:cc:ea:cb:2e:a3:4c:33:c2:75:0c:af: f9:ad:fa:c3:f3:5d:d1:75:38:59:3c:2b:ff:83:fb:73:6f:02: 25:4f:4f:a2:fe:b4:9e:8a:c6:7a:24:03:cf:c1:9d:d0:53:5d: 29:75:5e:2b:37:69:46:28:44:3c:f6:89:5f:b8:1b:ac:39:d5: 34:76:d9:80:f4:3d:33:ca:b9:68:a9:a8:0a:72:4c:1a:02:ad: 4c:93:73:dc:e1:90:57:d3:72:37:83:f8:61:5a:e2:6e:a9:2d: b8:91:9b:09:76:87:8b:e4:d8:d7:01:01:f2:43:6b:db:6c:7a: 8d:3f:1e:78:3b:d8:79:65:86:25:19:37:db:64:91:d2:76:26: b3:34:27:c6:c6:f5:83:2c:3b:07:ab:b4:ba:45:ed:05:1a:38: dd:0b:21:b1:16:bb:ac:ce:f8:26:9e:1c:78:8c:e0:11:26:e7: 01:1c:13:4c:43:80:f6:45:b5:98:42:75:45:72:96:72:3b:f6: 65:11:0e:64:ff:65:5b:5f:03:b8:8a:35:38:98:48:e9:bd:3a: db:e5:0c:ef:91:38:b0:6a:ac:49:a7:2a:6a:2e:78:e7:b1:8a: f9:88:20:63:cf:a9:f0:9a:c3:de:0e:5a:ea:62:f7:2c:44:72: f7:a5:77:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LDSGpRCFIPqn3UYkZZQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTI1MDgwMTM2WhcNMjYwMTI2MDgwMTM2WjAzMTEwLwYDVQQD EyhiNGJiZGMyN2Y0MzU3N2ZmOGZkMWNiOTFiZDAyYzBhNzBkYTMyZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqg2FOiID9o90DD5e/in2WxK/BkF 8bPUs1pV7XKRfSG+9CJt5XzeOJrqOdQDorbbNvChDZJ9Swa0pHW7FeBNj+JQTog1 m8DojZuqT6g/Vr5p30zbkela/fE1yO+OF2trfLVn8h09vo6IVXsSY+NeumeD46QF DnwmTqs5H9ziNJB0G+YcaUnBP51ql6t9vqUI3BusHAY4tdqrnp3Q2xLJ50jFT7WJ kOyzeE1/au1H7xU9JqdVq2WZQkFnQTsO6gtdwllU8lkjg3A9ZkoencW7+jCiodzV BvTFGWJ5cCxuYBCRTXV1CBrt/DDidhtKiEEsmh9LEfE/QSgZ/VgOEX5dkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS73Cf0NXf/j9HLkb0CwKcNoy0CMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsQMMN2o zMzqyy6jTDPCdQyv+a36w/Nd0XU4WTwr/4P7c28CJU9Pov60norGeiQDz8Gd0FNd KXVeKzdpRihEPPaJX7gbrDnVNHbZgPQ9M8q5aKmoCnJMGgKtTJNz3OGQV9NyN4P4 YVribqktuJGbCXaHi+TY1wEB8kNr22x6jT8eeDvYeWWGJRk322SR0nYmszQnxsb1 gyw7B6u0ukXtBRo43QshsRa7rM74Jp4ceIzgESbnARwTTEOA9kW1mEJ1RXKWcjv2 ZREOZP9lW18DuIo1OJhI6b062+UM75E4sGqsSacqai5457GK+YggY8+p8JrD3g5a 6mL3LERy96V3+A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:40 2026 by rpki-client